CVE-2026-105004

HighCVSS 7.8/10Last modified Oct 16, 2026

Description

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-1050058.1Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.CVE-2026-1050066.4Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1050078.8An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length CVE-2026-1050089.0No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.CVE-2026-1050097.5Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.CVE-2026-1050109.8Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.CVE-2026-1050137.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-1050149.1Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to exCVE-2026-1050169.8Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.CVE-2026-1050294.3UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of ControlleCVE-2026-1050305.3Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactiCVE-2026-1050329.1The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authe
CVE-2026-105004: High severity, CVSS 7.8 | Vulnix